Two Canadians Charged in Crypto Mining Hack Targeting U.S. Universities

Cryptojacking turns someone else's hardware into a private mining rig, and university supercomputers are a prime target: publicly funded, powerful, and often watched less closely than corporate networks. The indictment accuses Roach and Mathiew James Stubbings of exploiting that gap for over three years, from June 2016 to December 2019, moving between research clusters in New York, Tennessee, North Carolina and Massachusetts before investigators connected the intrusions.

Roach's handover to the Western District of New York closes a seven-year gap between the alleged intrusions and a courtroom. The 35-year-old Saskatchewan man now faces conspiracy, information-theft and system-damage charges carrying real prison exposure, not just a civil claim. Universities whose supercomputers were hijacked gain a prosecution to point to when justifying tighter login controls and monitoring budgets, while Stubbings' status as co-defendant remains the open thread in the case.

A cryptojacking scheme built on stolen supercomputer time versus a seven-year wait for an arrest to become an extradition says something uncomfortable about enforcement speed against borderless computer crime. Prosecutors describe a straightforward plot: steal credentials, mine quietly, let institutional budgets absorb the electricity and compute costs. The harder question is how many similar intrusions against research infrastructure go undetected or unprosecuted because the victim is a university lab rather than a bank.

The next milestone is Roach's arraignment and any plea in the Western District of New York, which will determine whether the case proceeds to trial or settles quickly. Stubbings' whereabouts and whether Canadian or U.S. authorities secure his appearance remain unresolved and will decide whether prosecutors can present the full conspiracy as charged in the original New York grand jury indictment.